Comment by barrotes

Exactly my thoughts. To avoid out-of-regulation tweaking coudn't they just allow signed code to run? How can I be sure that this closed for, i.e. surveillance reasons? One can publish the source code and still prevent misuse afaik.